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(b) To identify areas where safety problems and technology 
voids exist and to initiate research programs both in- 
house and on contract in these problem areas. 

(c) To author and compile state-of-the-art and summary 
publications in our areas of concern. 

(d) To establish and operate a Safety Data Bank. 

In pursuing these objectives, ASRDI has assumed the responsibility 
for publishing two documents resulting from an effort initiated and 
supported by the NASA Headquarters Safety Office (DY) . 

The first of these documents is: 

General Electric Co., Daytona Beach,, Manned Space Programs 
Accidents/Incidents Summaries (1963-1969), March 1970, NASA, 
Director, Manned Space Flight Safety, NASW-410 (Safety Task), 
NASA -CR- 12099 8. 

This document is being reprinted to fill current needs. 

The second of these documents is: 

Cranston Research Inc., Manned Space Programs Accident/ 

Incident Summaries (1970-1971), April 1972, NASA Headquarters 
Safety Office, Charles W, Childs, Program Manager, NASW-2225, 
NASA -CR- 12 09 9 9 . 

This is the initial printing of this report. 


Frank E. Belles 

Director of Aerospace Safety 

Research and Data Institute 
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FOREWORD 


This summary lists some 500 errors and oversights that have 
caused loss of life, loss of funds and created expensive delays 
or embarrassment in space programs. Considering the magnitude 
of the program the number of "anomalies' 1 were surprisingly few. 
Nevertheless, the purpose of this project is to help prevent 
repetition of these errors and oversights in future programs. 

An epigram ascribed to Emerson says, "Learn from the mistakes 
of others, you'll never live long enough to make them all 
yourself." 

The compilation was made possible through the understanding and 
support provided by management and safety personnel of NASA 
Headquarters , NASA field centers, NASA contractors, associate 
contractors and subcontractors. The cooperation of the many 
companies who contributed to this document is greatly appreciated. 

An accident or incident, in fact, any undesirable event, reflects 
on the efficiency of management and of participating personnel. 
Prof. Kenneth Andrews of the Harvard School of Business Administra- 
tion noted that "every accident, no matter how minor, is a 
failure of organization." A repetition of the accident or 
incident is difficult to excuse if preventive information is 
available but unused. 

The summaries are classified by ten systems. We would appreciate 
su £S es on improving the classification and especially your 
plans to encourage the use of this summary in accident prevention. 

A well known ball player Tommy Henrich once said, "Catching a fly 
ball is a pleasure, but knowing what to do with it after you catch 
it is a business." 



V/ 


Jerome Ldderer, Director 
Manned Space Flight Safety 


v 




TABLE OF CONTENTS 




PART 1 - INTRODUCTION 

Page 

A. 

Purpose & Objective 

1 

B. 

In Format! 

on Sources 

1 

C. 

Criteria Used 

1 


i. 

Description 

1 


2. 

Causes 

2 



a. Hardware Deficiencies 

2 



b. Software Deficiencies 

3 


3. 

Recommended Corrective/Preventive Action 

4 



PART II - STATISTICAL SUMMARY 


A. 

Distribution by Systems 

5 

B. 

Distribution by Causes 

5 


1 • Hardware Deficiencies 

5 


2. Software Deficiencies 

5 

C. 

Distribution by Program Activity 

6 

D. 

Distribution by Accidents vs Incidents 

6 

E. 

Distribution by Work Shifts 

6 

F. 

Distribution by Calendar Quarters 

7 

G . 

in juries/Fatal i ties/Damage 

7 

H. 

Human Error 

7 


PART III - ACCIDENT/INCIDENT SUMMARIES 


Section I 

Cryogenic Systems 

12 

Section II 

Electrical Systems 

27 

Section III 

Facility/GSE Systems 

44 

Section IV 

Fuel and Propel lant Systems 

74 

Section V 

Life Support Systems 

94 

Section VI 

Ordnance Systems 

100 

Section VII 

Pressure Systems 

104 

Section VIII - 

Propulsion Systems 

143 

Section IX 

Structural Systems 

155 

Section X 

Transport/Handling Systems 

162 

APPENDIX - 

Glossary of Abbreviations, Acronyms and Terms 

177 


vii 




PARTI, INTRODUCTION 


A- Purpose and Objective 

This compilation of accident/incident information relative to space programs has 
been prepared as part of the NASA Manned Space Flight Safety Program. The 
objective of the project was to contribute to safety by making available to 
government agencies and industrial concerns, the significant lessons learned 
from the accident/incident experience of Manned Space Flight Programs. No 
reference has been made in these summaries as to location, facilities, companies, 
organizations, products, programs, or individuals involved. The document has 
been prepared primarily for the use of management, supervisory, engineering, 
and safety personnel on space programs. For most effective use in future programs, 
the individual accidents/incidents recorded herein must be interpreted by program 
specialists for application to potential hazards of the particular program or systems 
involved . For the assistance of management in evaluating the potentially hazardous 
phases of a program, statistical summaries of cause factors and other significant 
information pertaining to accident prevention in future programs has been provided. 

B. Information Sources 

The summaries contained herein were compiled from existing documentation of 
accidents or incidents on Manned Space Flight Programs. In the compilation of 
this document approximately 10,000 case documents were reviewed from which 
a total of 508 summaries were selected. No attempt was made to record anomalies 
which occurred during manned space flight missions. Records reviewed included 
existing records of NASA Hdqs., NASA field centers concerned with space programs 
and 18 contractors, associate contractors and subcontractors on space programs. 

The majority of accidents/incidents selected, occurred during various phases of the 
Apollo Program with the remainder selected from other manned space programs. 

C. Criteria Used 

Each accident/incident summary contained in Part III has been summarized by 
description, cause and recommended/preventive action: The criteria used for 
each of these summary segments is defined below: 

1 . Descriptions 

Accidents/incidents were selected from records on the basis of the 

following criteria: 

a. An occurrence which reflected a significant lesson of importance 
to future programs. 

b. The occurrence involved space programs flight vehicle systems, 
hardware or ground support equipment and facilities providing 
direct support to space programs. 

c. The occurrence resulted in personnel fatality/injury, and/or 
caused damage to program systems, hardware, GSE and facilities 
or resulted in a potentially hazardous condition. 
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The description for each accident/incident relates what happened; how It happened; 
the phase of the program activity involved; hardware, equipment and/or and facili 1 1 
damaged, personnel injuries and fatalities incurred or potential hazards created. 

The description of what happened has included the event that caused the accident/ 
incident to occur. For example, M a gauge blew up and injured one person during 
development test of an engine, due to inadvertent cross connection of high and 
low pressure systems. 11 Here, the first order cause factor was Included as part of 
the description of what happened and permits concentration in the cause section 
on the second order of causes related to why it happened . This was done because it 
is believed that too often cause factors have not been identified in sufficient depth 
to provide guidelines for management or supervisory corrective programs. 

2. Causes 

The causes identified in these summaries reflect the causes shown in the 
accident/incident records. In many cases, the reports were supplemented 
by discussions with key people to more accurately identify cause factors. 
The second order cause factors considered were hardware or software 
deficiencies, as determined by the following criteria: 
a. Hardware Deficiencies 

q Materia l Failure - Material failure as used in cause 

determinations was defined as any failure of materials or 
components in development tests at less than design 
specification or failure under operational conditions. 

° Design Deficiency - This cause factor was defined 
as any design specification inadequacy, resulting in 
deficient hardware which contributed to the occurrence 
of an accident/incident. Factors considered were 
omission of essential information, failure to specify 
safety devices or warnings, failure to determine 
stress/fatigue and other operational/interface factors, 
errors in material selection, or clerical errors in 
drawings and specifications. 

° Materials Incompatibility - Materials incompatibility 

was defined as any cause in which incompatible materials 
were brought together through a design error, installation 
error, or procedural error. 

° Mai functions “ Malfunctions were defined as any anomaly 
where a system, subsystem or component failed to function 
as intended, resulting in conditions which contributed to 
accidents/incidents. 



b. Software Deficiencies 

o Procedural - A procedural deficiency was defined as 
any case in which formal procedures contributed to 
accident/incident causes as a result of failure to 
prepare procedures, failure to follow procedures, 
deviations from procedures during a test, failure to 
coordinate concurrent tests, omissions of essential 
information in procedures, clerical errors in procedures, 
use of wrong procedures, or failure to update procedures. 

o Planning - A planning deficiency was defined as any 
case where the cause of an accident/incident was due 
to failure to properly plan prior to an event. Included 
in these considerations were lack of or inadequate test 
planning, failure to perform pre -operations hazard 
analysis, deficiencies in planning for transportation, 
handling and storage, and failure to determine neces- 
sary equipment and personnel resources for an operation. 

o Work Control - A work control deficiency was defined 
as any condition contributing to an accident/incident 
during installation, maintenance, storage, cleaning, 
repair, and fabrication of systems. Factors considered 
as work control deficiencies were inadequate records, 
inadequate area control, failure to exercise proper 
control over materials, failure to properly mark and 
identify equipment and failure to define work require- 
ments. 

o Mono gement/Supervisory - This cause factor was defined 

to include errors in decisions, policies, or directives 
which contributed to the occurrence of accident/incidents. 
Included was failure to perform management or supervi- 
sory responsibilities for planning; training and certifying 
personnel; and failure to perform personnel surveillance 
of critical activities. 

o Training - This category was defined as any deficiency 
in workmanship or duty performance in which lack of 
training, briefing, certification or specific work instruc- 
tions contributed to an accident/incident. 

o Inspection - An inspection deficiency was defined as 
any condition contributing to an occurrence in which 
inspection was involved through failure to verify, 
failure to maintain inspection records or errors in 
inspection records. 
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3 ♦ Recommended Corrective/Preventive Action 

In this part', an effort was made to reflect all recommendations included 
in the reports reviewed. In many cases, recommended corrective/preventive 
actions were keyed solely to the one event and was not necessarily broadly 
applicable to other similar events. In those cases, the recommended corrective 
actions were extrapolated for application generally to like systems on 
future programs. Also, since cause factors were considered in terms of 
Hardware or Software deficiencies, the recommended correct! ve/preventive 
action was generally oriented by to these cause factors. 
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PART II, STATISTICAL SUMMARY 


A . Distribution by System 

The percentage distribution of accident/incidents by system categories are shown in 
Chart I. Of the ten (10) system categories used, the largest contributor to accident/ 
incidents was Pressure Systems, The three systems having the highest percentage 
Involvement were as follows: 


1 . 

Pressure Systems 

23% 

2. 

Facility/Ground Support Systems 

19% 

3. 

Fuel and Propellant Systems 

13% 


Of significance, is the fact that ordnance systems were not a major source of accidents, 
constituting only 3% of the total and most of these occurred on programs other than the 
Apollo Program. Likewise, structural systems were not a major source of accident/ 
incidents, comprising only 3% of the total. 

B. Distribution by Causes 

The distribution of accidents/incidents by cause factors is shown in Chart 2. Software 
deficiencies were a greater contributor to accident/incidents than Hardware deficiencies, 
and procedures, work control and inspection were the most significant Software cause 
factors. 

1. Hardware Deficiencies 

Hardware deficiencies were for the most part, related to design deficiencies. 
The number of cases in which design deficiencies contribufed to or caused 
accident/incidents was significantly higher than those caused by material 
failures or malfunctions. In 37% of the cases, a design deficiency was 
identified, whereas, only 3% of the cases involved material failure as a 
cause and only 8% involved malfunctions. Cases involving malfunctions 
occurred mostly during operational tests and manufacturing checkout. 

Likewise, the number of cases where material incompatibility contributed 
to the cause of accidents/incidents was relatively small, only 4% of the 
cases, however, some very serious accidents occurred as a result of this 
factor. 

2 . Software Deficiencies 

The number of cases involving procedural deficiencies was significantly 
high and constituted the single largest contributor to accidents/incidents 
causes with 46% of the cases. Likewise, the number of related work 
control deficiencies was quite high. This area was a very significant 
factor in accident/incident causes and constituted the second largest 
contributor with 40% of the cases. 


5 



Management or supervisory deficiencies were involved in 4% of the cases. 
Seven per cent (7%) of the cases involved planning d eficiencies and 11% 
of the accidents/incidents involved training deficiencies. In many cases, 
training deficiencies pertained to inadequate knowledge of the total operation. 
Individuals were not well enough informed of other work going on concurrently 
and/or what the previous shift had done as shown by the fact that 3% of the 
accidents/incidents involved failure to transfer essential information during 
shift changes. Although inspection deficiencies were not the primary cause of 
accidents/incidents, inspection was a major contributing factor since many 
accidents/incidents could have been prevented had there been sufficient and 
timely inspection and verification. For example, in 4% of the cases, there 
were cross connections of lines or cables which could have prevented by 
inspection. Twenty-six percent (26%) of the accidents/incidents involved 
inspection deficiencies. 

C . Distribution by Program Activity 

As records were reviewed, the accidents/incidents were identified to a program 
activity. The results of this compilation are shown in Chart 3. As shown in the 
chart, more accidents/incidents occurred during operational test and checkout 
than in any other program activity, accounting for 47% of the total . Manufac- 
turing was also a signficant source of accidents/incidents with 30% of the cases 
occurring during this activity. 

D. Distribution by Accident vs Incidents 

An attempt was made to determine the number of accidents vs incidents, but 
problems of definitions made this very difficult. Under NASA Safety Manual 
NHB 1700.1 published in 1969, accidents and incidents are defined in terms 
of seriousness as related to monetary damage or personnel injury/fatality. 

Prior to the publication of this manual, there was inconsistency in the manner 
of defining accidents and incidents. However, those cases were identified where 
an investigating board was established and this was used as a basis for determining 
number of accidents. On this basis, accidents constituted approximately 17% 
and incidents 83% of the total summaries included. 

E. Distribution by Work Shift 

The statistical summary of accidents/incidents by work shift revealed a rather 
direct relationship to the level of activity or the number of people involved in 
each shift. With most of the work done on the day shift, as would be expected, 
the majority of cases occurred on the first shift. Although risks may have been 
higher, per level of activity, on second and third shifts, data was not available 
to make this correlation. Distribution of cases by shift was as follows: 


First shift 

65% 

Second shift - 

26% 

Third shift 

9% 
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F . Distribution by Calendar Quarters 

The seasonal distribution of accidents/incidents by calendar quarters was compiled 
as follows: 


First Quarter 
(Jan. , Feb. , Mar.) 


29% 

Second Quarter 
(April, May, June) 

- 

24% 

Third Quarter 
(July, Aug. , Sept.) 

- 

27% 

Fourth Quarter 
(Oct. , Nov . , Dec.) 

- 

20% 


This compilation shows a shows a higher percentage occuring in the winter and summer 
which may be due partly to more severe weather conditions during these periods , or 
there may have been a higher level of activity during these periods. This distribution 
could not be correlated to any particular factor, and the variation in distribution was 
not enough to be significant. 

G . In juries/Fatali ties/ Damage 

Records compiled on percentage of accident/incidents which involved injuries, fatalities, 
or damage showed the following: 


% of the total 

Injuries 15% 

Fatalities 1% 

Damage (hardware, facilities, equipment) 68% 

In a number of the cases, personnel injury or fatality, as well as damage occurred. 
A number of incidents were included in the summaries where there were no injuries, 
fatalities, or damage, but the incident created a high hazard potential. For these 
reasons, the percentages shown do not cumulatively represent all the accidents/ 
incidents summarized. 

H . Fluman Error 

Separate emphasis was not given to human error in identifying cause factors because 
human error would be present to some degree in most unplanned events. Emphasis 
was placed, however, upon determining what caused or contributed to the human 
error and as the accident/incident records were reviewed, a notation was made as 
to whether or not human error was directly involved in the cause of the accident. 
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H. Human Error (Cont.) 

Based upon a simple yes or no determination of direct human error involvement, 

74% of the cases involved human error as a contributing factor to the cause of 
accidents/incidents. The number of cases where an individual act of carelessness 
or irresponsibility at the time of the occurrence was the only cause, was less than 
l%of the total. Although human mistakes, poor workmanship, carelessness or 
irresponsible acts, were identified as directly or indirectly involved in 74% of 
the cases, the majority of these cases involved second order causes. Human 
error involvement could probably have been identified to the remainder of the cases 
had more detailed information been available. In practically all the cases there 
were indications that management and supervisory deficiencies were indirectly 
involved in accident/incident causes even though these deficiencies were not 
specifically identified in the reports. 
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CHART 2 - DISTRIBUTION OF ACCIDENT/INCIDENTS BY CAUSES 
Note: Several Cause Factors Could Be Involved in the Same Accident/Incident 
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between the impeller and the positive flow of LOX to seal area 

at all times. 


SECTION I 

CRYOGENIC SYSTEMS (CONT.) 
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19. While preparing for vacation period, work- Failure to follow check lists and Require use of check lists for shutdown of test 

men failed to shut down test stand LN 2 failure of Q.C. to verify closing stands. Require Q.C. verification of all 

standby purge panels, resulting in premature of critical pressure valves. Lack critical valves following all tests or shutdown 

depletion of the LN 2 tank. of warning devices for pressure of stand. Provide audible and visual devices 

drops contributed to this incident. to warn of pressure drops. 
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in the top of the dewar. 
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resulted In the venting and the fire. 
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and generation and storage of liquid air. ice on the disc. Also, periodic 

The burst disc on the jacket failed to inspection of insulation was not 

relieve the overpressurized condition. being performed, 
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personnel to take action when "full button on battery chargers to prevent 
charge" warning light was noted. inadvertent setting. 
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tank, causing the vacuum to be lost and panel was locked but 22 keys had depend on power. Limit access key to panel 

the chuck to fall off. No damage been issued and an unknown person locks to an absolute minimum of people, 

incurred but potential for damage was had unlocked the panel and turned 

considerable. the power off. A similar incident 

had occurred earlier. 
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lines. for lines located beneath batteries. electrical or propellant lines. Require a 

hazard analysis to be performed on battery 
installations to ensure lines subject to battery 
leakage are provided with protective devices. 
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environment. materials and prohibit maintenance during 

tests. 
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point where it struck and damaged 
antenna outrigger sections on the 
stage. 
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SECTION III 

FACILITY/GSE SYSTEMS (Cont.) 
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Contributing was a design deficiency 
in the installation in that main fuel 
tank was too close to heat source. 
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unauthorized personnel into the test facility should be restricted to 

test cell who were not familiar with certified personnel involved in the 

the equipment, and who were actual testing, 

responsible for causing the equip- 
ment to fall . 
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SECTION III 

FACILITY/GSE SYSTEMS (Cont. ) 
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four inches striking a Hi-Press Fuel intake tooling to support hardware until hardware in proximity of change-' 

duct causing considerable damage. No secured. part, 

personnel injury, however the duct 
required replacement. 
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caused expeditious evacuation of ball valve to open and fuel to flow Require pre-operations verification of 

personnel resulting in an injury to a through the ball valves into the engine of functional integrity of regulators, 

technician who jumped from the stand. diffuser orifices. Contributing cause 

was a leaking "K" bottle regulator. 
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hook-up was incorrect and resulted ir 
cross-connection with RP-1 and LOX 
systems and caused contamination of 
the systems. 
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change in the test procedure. Provide positive pressure readouts in all 

critical pressure systems and provide relief 
vents in areas where vacuum can be 
encountered . 
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ana warning rags attached indicating 
hazards of potential residual fuel after 
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minor damage. ment valve was available. is detected. 
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ulated in an engine compartment and where vapors may accumulate from 

ignited, propellant systems. 
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of the tank, requiring special oper- Contributing was inadequate inspection and that required components are 

ations to drain the tank. of tank installation and lack of Q.C. specified in the work order. 

signoff. 
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mixture. The ignition source was 
apparently by static discharge from the 
vertical stack tip using a horizontal 
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hand valve on the valve panel* The the first line was correct, the second 

cross connection did not cause any was also* 

equipment damage or personnel injury 

however significant delay of oxidizer 

loading resulted . 
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and inlet valves and lines were of stain- 
less steel with teflon parts. 
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the system from exceeding critical of heater elements used in conjunction 

temperature limits. with gaseous hydrogen systems. 



05 n O • 

0 P c 
4/1 q. r o 

-n v> •— 

g|£| 
§ 2=5 | 

_2 <D O P 
u .£ *C c 


X . 

^ -2 ^ 
O 0) 

_2! C > 
- 1 O 

gl I 

O to 


d> c 

o § ^ 
* % D 

°- v 4> 

8> IS 

•— to 

-> 3 O 

o- cr t 

0) t+_ O 
OC o o 


> E 
U * 

O <j 

D 

£ E © 

*3 8 r 

8 \* O 
cX ~U E 


05 C 

•| 8.| 

•E o § 

0 4-0 

II ? 

0^2 

>o 0 
t C T) 
£ C 0 

0 n «/* 

§ * I 

1 O * 


O 0 

*- 0 U 

"O “§ D 
8 5 8 

£ b e 
0=0 
X o 

0 ^ o 
o n 


* 2 « 

to *Jr 

4-0 

O C P 

-t 5 o 

c > c 

o £ o 

U aE 


u ( 
0 : 
C 

<o C 
-X O 
o o 

<p 

-X 

“o X 

0 D 
— O’ 


frogs- 

E 2 f 1' 

Q.-D E u 


-> 0 
O £-§ 

> s § 

■s * -f. 
£ J 2 ^ 

_ u t; 
D o 0 
_C CL^ 
.t: 4 - 0 

* a ■£ 
00 

"8 • § 


C o to 
M 0 ) 

"8 ° o 
$ .§* o 

SiJ 

J3! 

<U fe E 

j e c 

■q- 2 O 
8u u 

!:•- 
O ® "O 

x’Z £ 

£ | 8 

0 S *" 

f 8.1 

< 1^0 


0 3 
_o - 

1 o 
-5 § 

E ^ 

O i— 

3 8 _ 

o o 
> > 


o 

0 

05 


-Q 

.£ 

O 

• 

_c 

3 

"O 

C 

i/> 

# 

P 

0 

"O 

0 

05 

C 

F 

-O 

0 

t 

3 

O 

O 

icle 

-u 

C 

3 

05 

O 

t_ 

o 

&- 

3 

O" 

*E 

o 

j) 

0 

3 

O 

42 

-C 

0 

O 

M— 

to 

0 

1 — 

o 

£. 

o 

o 

O 

0 

> 

0 

L. 

.E 

■B 

"O 

c 

to 

4 - 

c 


c 

c 

o 

J 

0 

* 

X 

u. 

3 

*5 

to 

o 

0 

c: 

*Q_ 

</) 

O 

to 

< 4 — 

o 

J 2 

£ 


_Q 


o ~o c 

1 SX O 
"0 0 4- 

o o E 

o cr 


co 


98 



SECTION V 

LIFE SUPPORT SYSTEMS 
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During a training class an instructor Human error in that the instructor Require checklists to be used at all 

was demonstrating a component of a connected the power to the wrong times when working with explosives, 

destruct system when exploded terminals causing inadvertent Color code or otherwise provide 

causing damage to equipment, activation. positive matching of circuits with 

terminals. 
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PRESSURE SYSTEMS (Cont.) 
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verfently causing whipping of the vent line riser pressure control valves were leaking. possible malfunction or leakage, 
and breaking of the line. 
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unpressurized valve and was injured by a fication of the function of lines and checklists for "pressure up" and 

piece of "O" ring. valves and inadequate panel sche - "pressure down" sequences. 

matics. 
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failure. No injury to personnel. pressure test of flex hose prior to Ensure that pressure systems operating 

use, and responsibility for proof manuals require verification of proof 

testing not clearly established. test requirements before installation 

of pressure lines . 
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pressure relief device in the test in all pressure test set-ups. 

set up and procedural error in not Establish personnel safe 

requiring personnel safe distance distances for all pressure 

during the test. tests and designate same in 

test procedures. 
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SECTION VII 

PRESSURE SYSTEMS (Cont.) 
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break. I here were no re lie 
devices for the flowmeters. 



SECTION VII 

PRESSURE SYSTEMS (Cont.) 
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were 1800 to 4000 psig). 
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the burn stack at the end ot prior to operanons, to aerermme 

the horizontal vent line which potential flashback and static charge 

permitted flashback. hazards. 
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the tank strength, Contribu- prepared by vendors should be reviewed 

ting cause was inadequate and approved by the prime contractor 

subcontractor control by QC. Quality Control. 
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of both simultaneous operations that 
were taking place. 
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minutes. No hardware damage or panel retesting and integrated to ensure that exact vehicle configurations 

schedule slippage other than loss of systems testing. are always known, and operating times 

test time to investigate. are recorded. 
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collapse during draining. Procedures were conducted only in accordance with a 
inadequate and not followed by test crew, detailed written test procedure which 

integrates the entire operation. 
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and discolored, was an inspection deficiency and lack of warning notes/labels to be placed upon 

control over corrosive cleaning agents. any corrosive agents used around flight 

hardware. Require any spillage on flight 
hardware to be reported immediately. 
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for flight operations* this incident was the lack of adequate should be accomplished prior to initiating 

security in the area during non-working testing. Security in the test area should 
hours. Unauthorized personnel had be implemented to restrict all unauthorized 

tampered with the test set-up. personnel from the test area during all 

qualification testing. 
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due to extensive damage- were inadequate tug horsepower, use of pellant movement plans to ensure that all 

marginal waterways for the size of the hazardous contingencies are considered, 
load, and performing the movement at Ensure that equipment is compatible with 
night on a strange waterway. loads, routes, and environment. 
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with subsequent rotation of the panel. jig movement following retaining bolts fixtures should include provisions for 

Major damage resulted to instruments removal . safe handling of end item hardware 

and hardware requiring complete panel during installation/assembly, 

replacement. 
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that subsequently rendered the unit 
unfit for flight operations. 
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to tip off the dock when the forklift 
was raised. 
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APPENDIX 


GLOSSARY OF 

ABBREVIATIONS, ACRONYMS AND TERMS 


ACE 

ASI 

ASME 

CG 


co 2 


CRS 

DB 

ECS 

EO 


GH 2 



He 


Hz 

KOH 

lh 2 

ln 2 

LOX 

n 2 o 4 

LUT 

PS I 

PS I A 

PSIG 

QC 

QD 

Q&RA 

RCS 

R&D 

RF 

RPM 

SCAPE 

SCFM 

TC 

TCD 

TCP 

TPS 

TPI 

TV 

TVD 

UDMH 

VDC 


Automatic Checkout Equipment 

Apollo Standard Initiator 

American Society of Mechanical Engineers 

Center of Gravity 

Carbon Dioxide 

Cold Rol led Steel 

Design Burst 

Environmental Control System 
Engineering Order 
Gaseous Hydrogen 
Gaseous Nitrogen 
Ground Support Equipment 
Helium 
Hertz (cps) 

Potassium Hydroxide 
Liquid Hydrogen 
Liquid Nitrogen 
Liquid Oxygen 
Nitrogen Tetroxide 
Launcher Umbilical Tower 
Oxygen 

Operational Checkout Procedure 

Pounds Per Square Inch 

Pounds Per Square Inch Absolute 

Pounds Per Square Inch Gauge 

Quality Control 

Quick Disconnect 

Quality and Reliability Assurance 

Reaction Control System 

Research and Development 

Radio Frequency 

Revolutions Per Minute 

Self Contained Atmospheric Protective Ensemble 

Standard Cubic Feet Per Minute 

Test Control/Test Conductor 

Test Checkout Directive 

Test Checkout Procedure 

Test Preparation Sheet 

Threads Per Inch 

Television 

Toxic Vapor Disposal 
Unsymmetrical Dimethylhydrazine 
Volts, Direct Current 
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APPENDIX (CONTINUED) 


Accident 

Incident 

Cryogenics 

"D" Water 
Dewar 

Hardware - 

Software 

"Hoke” Bottle 

"K" Bottle 
"Kluge" 

Program Phase 

Program Activities- 


A type A or B mishap as defined in the NASA 
Safety Manual , NHB 1700.1 (VI) 

A mishap of less than accident severity as 
defined in the NASA Safety Manual, 

NHB 1700.1 (VI) 

The science of producing and the application 
of low temperature processes below minus 
150° F and the techniques involving handling, 
storage and usage of liquified gases. Examples 
are hydrogen, oxygen and helium. 

Disti I led water. 

A double walled metal vessel or tank, with 
an evacuated space between walls, used for 
storing fuels and propellants in a liquid state. 

Any program component, subsystem, system, 
module, stage or vehicle, plus any faci lity 
equipment and property, ground support 
equipment (GSE) and other used in direct support 
of program hardware. 

Any formalized written policy, directive, 
procedure, plan, specification, requirement or 
analysis prepared as an essential tool in the 
conduct of program activities. 

A small pressure vessel or container used in 
obtaining, handling and transporting gases 
and liquids for sampling. 

A portable pressure cylinder or tank commonly 
used as a pressure source. 

A frequently used slang term for a temporary or 
unauthorized installation. 

The four phases of a major research and development/ 
operations program as defined in the NASA Phased 
Project Planning Guidelines, NHB 7121.2, August 
1968 Edition. 

Tasks, work, functions and responsibilities associated 
with program hardware development/ operations as 
defined in NASA Phased Project Planning Guidelines, 
NHB 7121.2, August 1968 Edition. 



